← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-80517
WP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG Upload
CVE-2026-103514
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
CVE-2026-103293
MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import
CVE-2026-101162
WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings
CVE-2026-101161
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
CVE-2026-101160
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating
CVE-2026-101159
WP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submission
CVE-2026-19856
All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search Query
CVE-2026-81740
Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback
CVE-2026-85004
Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect